Otwórz notatnik systemowy i wklej: ShortcutWithArgument: C:\Documents and Settings\Marzanna\Pulpit\programy\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\Marzanna\Pulpit\programy\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\Marzanna\Menu Start\Programy\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\Marzanna\Menu Start\Programy\Akcesoria\Narzędzia systemowe\Internet Explorer (bez dodatków).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\Marzanna\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Google Chrome (2).lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\Marzanna\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\Marzanna\Dane aplikacji\Microsoft\Internet Explorer\Quick Launch\Uruchom przeglądarkę Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 ShortcutWithArgument: C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 MSCONFIG\startupreg: SweetIM => C:\Program Files\SweetIM\Messenger\SweetIM.exe MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKU\S-1-5-21-1390067357-2049760794-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 HKU\S-1-5-21-1390067357-2049760794-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= UWAGA SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 SearchScopes: HKLM -> {DC2BC9A2-2BB6-40B9-AA65-B6353E966DB5} URL = hxxp://startsear.ch/?aff=2&src=sp&cf=78962c4e-d8d8-11e1-a73a-001f3afff372&q={searchTerms} SearchScopes: HKLM -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={BA20B2D1-5B1F-4D27-BEFB-F15AAFB2A653} SearchScopes: HKU\S-1-5-21-1390067357-2049760794-1417001333-1003 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 SearchScopes: HKU\S-1-5-21-1390067357-2049760794-1417001333-1003 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 SearchScopes: HKU\S-1-5-21-1390067357-2049760794-1417001333-1003 -> {DC2BC9A2-2BB6-40B9-AA65-B6353E966DB5} URL = hxxp://startsear.ch/?aff=2&src=sp&cf=78962c4e-d8d8-11e1-a73a-001f3afff372&q={searchTerms} SearchScopes: HKU\S-1-5-21-1390067357-2049760794-1417001333-1003 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={BA20B2D1-5B1F-4D27-BEFB-F15AAFB2A653} Toolbar: HKU\S-1-5-21-1390067357-2049760794-1417001333-1003 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Brak pliku Toolbar: HKU\S-1-5-21-1390067357-2049760794-1417001333-1003 -> Brak nazwy - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - Brak pliku Toolbar: HKU\S-1-5-21-1390067357-2049760794-1417001333-1003 -> Brak nazwy - {EEE6C35B-6118-11DC-9C72-001320C79847} - Brak pliku DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=sc&from=newgdp&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1380363051 FF NewTab: C:\Documents and Settings\Marzanna\Dane aplikacji\Mozilla\Firefox\Profiles\di59igxo.default -> hxxp://www.delta-homes.com/newtab/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=nt&from=newgdp&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1380228060 FF SearchEngineOrder.1: C:\Documents and Settings\Marzanna\Dane aplikacji\Mozilla\Firefox\Profiles\di59igxo.default -> delta-homes FF Homepage: C:\Documents and Settings\Marzanna\Dane aplikacji\Mozilla\Firefox\Profiles\di59igxo.default -> hxxps://mysearch.avg.com?pid=wtu&sg=&cid=%7B036bfa38-7b36-4496-96cd-6085f2dd0798%7D&mid=0c9aa0a8fc1247d293aad15771c028de-f3d22a5868bb9a956fab158482341e148106feca&ds=AVG&v=3.2.0.15&lang=pl&pr=fr&d=2014-08-30%2016%3A51%3A49&sap=hp FF Extension: (SweetPacks Toolbar for Firefox) - C:\Documents and Settings\Marzanna\Dane aplikacji\Mozilla\Firefox\Profiles\di59igxo.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2013-01-06] [Brak podpisu cyfrowego] FF C:\Documents and Settings\Marzanna\Dane aplikacji\Mozilla\Firefox\Profiles\di59igxo.default\searchplugins\avg-secure-search.xml [2016-09-08] FF SearchPlugin: C:\Documents and Settings\Marzanna\Dane aplikacji\Mozilla\Firefox\Profiles\di59igxo.default\searchplugins\startsear.xml [2012-07-28] FF SearchPlugin: C:\Documents and Settings\Marzanna\Dane aplikacji\Mozilla\Firefox\Profiles\di59igxo.default\searchplugins\sweetim.xml [2012-09-23] FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\delta-homes.xml [2013-09-26] FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\qvo6.xml [2013-07-23] FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-09-08] CHR HomePage: Default -> hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624 CHR StartupUrls: Default -> "hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=ST9160821AS_5MAB2KA0XXXX5MAB2KA0&ts=1374593624" R2 Update BrowseSmart; C:\Program Files\BrowseSmart\updateBrowseSmart.exe [323360 2014-08-14] () R2 Util BrowseSmart; C:\Program Files\BrowseSmart\bin\utilBrowseSmart.exe [323360 2014-08-14] () R2 vToolbarUpdater30.7.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\30.7.0\ToolbarUpdater.exe [1235016 2016-09-08] (AVG Secure Search) U3 at1p7axo; C:\WINDOWS\system32\Drivers\at1p7axo.sys [0 ] (Intel Corporation) <==== UWAGA (zerobajtowy plik/folder) S3 btaudio; system32\drivers\btaudio.sys [X] S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X] S4 IntelIde; Brak ImagePath U1 WS2IFSL; Brak ImagePath 2017-05-19 13:37 - 2017-05-19 13:45 - 00000000 ___DC C:\AdwCleaner 2017-05-19 12:52 - 2014-03-29 22:02 - 00000228 _____ C:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job EmptyTemp: Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze. Uruchom jako administrator FRST i kliknij w Fix/Napraw. Przeskanuj progr. Malwarebytes Anti-Malware http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/